VULNERABILITY INTELLIGENCE

CVE-2022-0708

CVSS score4.3 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2022-02-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive & private information disclosure.

Weakness classification

  • responsibledisclosure@mattermost.com: CWE-200
  • nvd@nist.gov: CWE-200

Primary references